Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86ed48044afe9055fc34c1ba66119664edb250c5.cer
File:                     86ed48044afe9055fc34c1ba66119664edb250c5.cer (raw, json)
Hash identifier:          OD0mkRNft/o8gCPswd+C9t09MsHGvyihAVFUboxF61A=
Subject key identifier:   45:EA:E6:C1:E6:7E:19:BD:A4:2B:75:EE:D5:27:9A:F5:35:2B:0B:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5DD44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3b408104-bbfe-4244-8cc6-0e4076adc5c7/86ed48044afe9055fc34c1ba66119664edb250c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3b408104-bbfe-4244-8cc6-0e4076adc5c7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Jul 2018 14:44:54 +0000
Certificate not after:    Fri 17 May 2024 21:46:40 +0000
Subordinate resources:    IP: 45.239.124.0/22
                          IP: 2803:52a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15064388 (0xe5dd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 25 14:44:54 2018 GMT
            Not After : May 17 21:46:40 2024 GMT
        Subject: CN=86ed48044afe9055fc34c1ba66119664edb250c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:21:1e:fc:e9:d1:7e:62:98:9d:fe:f6:ab:
                    00:53:d8:f5:9c:87:e5:1d:47:a3:81:28:32:ba:35:
                    f4:3c:13:ea:af:18:22:bc:c6:e7:c8:d3:0e:c8:47:
                    69:d9:55:b5:ff:b8:d5:41:78:28:f3:4f:57:2e:23:
                    3e:af:8e:66:89:b5:91:26:df:02:65:f9:82:bd:32:
                    72:a2:13:f3:5e:d7:2f:b0:9a:34:6c:2f:f0:2e:3c:
                    2f:34:75:ed:92:46:95:7a:00:b2:3a:d1:13:c0:39:
                    40:e9:ea:cf:78:f9:a3:1d:73:a3:72:21:bd:b6:19:
                    35:0d:41:ad:ba:cc:37:0c:38:db:4b:37:94:bb:91:
                    51:b8:7e:1e:54:fd:79:96:57:d6:8b:5c:5e:0f:00:
                    b2:09:bc:68:f6:17:7b:a4:1c:0a:56:9b:55:a8:88:
                    2a:ae:90:10:36:ac:bd:f6:a5:ad:78:ae:be:4d:fe:
                    28:a9:f7:85:c2:7a:98:33:b2:74:90:b6:78:96:48:
                    18:f0:08:5a:42:e3:15:bf:17:21:88:e0:a8:16:48:
                    0d:aa:90:30:e6:d8:50:88:64:ed:ce:34:a1:66:5b:
                    7c:f3:80:ff:ab:d9:8b:12:3e:bb:b1:85:13:5b:a8:
                    a5:12:6a:a3:bb:f0:7f:c9:5d:4d:b7:47:fb:dc:e3:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EA:E6:C1:E6:7E:19:BD:A4:2B:75:EE:D5:27:9A:F5:35:2B:0B:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3b408104-bbfe-4244-8cc6-0e4076adc5c7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3b408104-bbfe-4244-8cc6-0e4076adc5c7/86ed48044afe9055fc34c1ba66119664edb250c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.124.0/22
                IPv6:
                  2803:52a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d2:fc:08:91:01:ce:ec:d2:d5:9e:aa:c0:2a:82:be:a5:18:
         18:12:89:eb:bd:e7:40:44:94:4f:9e:3b:7c:c6:a2:12:a1:c3:
         27:64:2f:2b:7e:07:91:70:4d:4c:ed:ea:7e:f9:f8:12:3b:9e:
         1c:d8:59:9f:ef:0d:eb:2d:13:3e:aa:72:f6:86:5d:4a:21:1a:
         73:a5:67:82:c6:89:49:26:1f:a0:71:cc:db:09:29:8a:55:2b:
         a0:94:ad:93:bd:f1:f9:02:c5:07:b0:a1:fd:72:cd:51:d3:6d:
         44:eb:7f:54:1b:73:03:6a:cd:3d:0d:49:85:b6:ed:af:09:7f:
         af:20:78:b8:5e:e5:b7:da:47:9e:16:a9:08:ac:e7:6a:96:43:
         cd:b8:b5:cc:38:0e:1b:3c:5a:8e:4e:7b:06:d4:a6:e5:46:98:
         50:35:87:08:79:6f:30:f5:30:cf:05:1e:d3:ad:24:dc:89:b3:
         40:e8:d0:07:ef:56:b3:41:00:26:34:d3:c8:87:b8:c6:37:81:
         8f:6e:1b:5f:20:75:35:a9:60:5c:c6:a5:0b:26:c2:c6:7a:37:
         ba:67:c0:ef:62:31:38:3e:c9:01:f6:29:96:f2:40:29:12:63:
         ff:fb:4c:0f:a6:69:d5:c7:07:81:69:38:94:2f:19:56:89:94:
         f4:c5:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----